Introduction

MIntegrity is committed to ensuring that all personal information collected is treated with the appropriate degree of privacy and confidentiality. This Privacy Policy is intended to provide an explanation of how and when personal information is collected and how it is stored and distributed within MIntegrity.

MIntegrity complies with the following laws and guidelines:

• Privacy Act 1988 (Privacy Act)
• Privacy Act 1988 / Privacy Amendment Act 2017 (NDB)
• Office of the Australian Information Commissioner’s (OAIC) APP guidelines
• General Data Protection Regulation (GDPR)

For further information regarding Privacy Laws, please see www.oaic.gov.au for more details.

Collection of information

The nature of personal information collected and maintained by MIntegrity generally comprises name, personal contact details, company contact details. This information is collected for the purpose of establishing and maintaining a service provider-client relationship. It may also be collected to meet legal and regulatory requirements, and for any other purpose to which the client consents.

Personal information may be collected from contracts and/or transactions entered into with MIntegrity, meetings and telephone conversations or through the MIntegrity website.

To monitor and improve our service we collect information on web site activity such as the number of users who visit our website, dates and times of visits, and training courses completed. This information provides MIntegrity with statistics that we can use to analyse and improve our web site and online courses.

How the information is used

We collect the information to help us provide accurate and up to date information about our business, the services and the products we provide. The collection of information is also essential in enabling MIntegrity to deliver a service to our clients, establish identity, protect from error and fraud and comply with the law.

The information collected is used for:

• Providing customers with the designated services
• Developing new services and products
• Improving the quality of our service delivery
• Preventing unauthorised access to customer information
• Business and statutory reporting purposes
• Marketing our services and products
• Compliance with Laws and Regulations
• Managing employee records

Disclosure of personal information

We do not sell, trade, lease or otherwise deal your personally identifiable information with third parties. However MIntegrity may distribute customer information within the MIntegrity business to conduct specialised activities such as high-volume email mail-outs or to supply specialised products such as value-added service offerings.

MIntegrity may also be required by law to disclose information to government regulatory authorities.

MIntegrity may be involved in the sale, transfer or reorganization of some or all of its business at some time in the future. As part of that sale, transfer or reorganization, MIntegrity may disclose some personal information to the acquiring organization but will require the acquiring organization to agree to protect the privacy of all personal information in a manner that is consistent with MIntegrity’s policies.

Consent to collection of personal information

By doing business with MIntegrity, clients are consenting to the collection, use and disclosure of personal information for the purposes identified in this Policy. MIntegrity will not, as a condition of the supply of services, require clients to consent to the collection, use or disclosure of your personal information beyond that required to fulfil those purposes.

Data quality and security

MIntegrity takes all reasonable steps to ensure that the personal information it collects is accurate, complete and up to date. MIntegrity will hold and process only the data necessary for the completion of its duties (data minimisation), as well as limiting the access to personal data to those needing to act out the processing.

All customer data is kept securely and in accordance with prevailing laws. MIntegrity carefully safeguards personally identifiable information from loss, misuse or unauthorised alteration. Access to personal information is restricted to those employees and other persons who need to know the information to enable us to provide services. MIntegrity employees are responsible for ensuring the confidentiality of all personal information they may access. Annually, MIntegrity employees are required to sign a Code of Conduct which contains policies on the protection of personal information.

Accessing personal information

Clients can request MIntegrity to provide them with access to information held about them. The information we can provide is limited to the personal information we hold about the client and the services and products that we supply to the client.

Right to be forgotten

The right to be forgotten entitles clients to request MIntegrity to erase your personal data, cease further dissemination of the data, and potentially have third parties halt processing of the data. The conditions for erasure include the data no longer being relevant to original purposes for processing, or the client withdrawing consent.

Data portability

Clients may receive the personal data concerning them, which they have previously provided in a ‘commonly use and machine-readable format’ and have the right to transmit that data to another controller.

Sensitive information

MIntegrity will not collect sensitive information about an individual unless the collection is required by law or the collection is necessary for the establishment, exercise or defence of a legal or equitable claim.

Information collected through our website

To evaluate the effectiveness, presentation and content of its website, MIntegrity may use third parties to collect and analyse statistical data. No personal information will be collected in these exercises and the third-party service supplier will not have access to any personal information.

Notifiable data breaches

MIntegrity is required to comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act 1988 (Privacy Act). The scheme requires MIntegrity to:

• Identify eligible data breaches
• Assess eligible data breaches
• Promptly notify impacted individuals and the Commissioner of the breach, unless an exception applies

For more information about how data breaches are deemed to be eligible or related questions, please visit oaic.gov.au or via telephone on 1300 363 992.

Contacting MIntegrity

If you have any questions relating to this privacy statement, or concerns about the way in which we have handled your personal information, please do not hesitate to contact us:

Amanda Mark
Co-Founder and Managing Director
Level 5
20 Bond Street
Sydney NSW 2000
Tel: +61 (0)415 285 811
amanda.mark@mintegrity.com.au